Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows remote attackers to read autofilled data by leveraging lack of a user-confirmation requirement...

myjobs.lk XSS vulnerability

Open Bug Bounty ID: OBB-592287 Description| Value ---|--- Affected Website:| myjobs.lk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

U.S. Dept Of Defense: Publicly accessible Order confirmations leaking User Emails on ███

Summary: I noticed that a user's order confirmation was publicly accessible leaking email information Description: An attacker can gleam sensitive information that is stored in the order confirmation file Impact Medium Step-by-step Reproduction Instructions...

teacheron.com XSS vulnerability

Open Bug Bounty ID: OBB-571454 Description| Value ---|--- Affected Website:| teacheron.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

madpaws.com.au XSS vulnerability

Open Bug Bounty ID: OBB-570436 Description| Value ---|--- Affected Website:| madpaws.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

backingtracks2mp3.com XSS vulnerability

Open Bug Bounty ID: OBB-558248 Description| Value ---|--- Affected Website:| backingtracks2mp3.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosu...

[20180504] - Core - Installer leaks plain text password to local user

The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and displays the plain text password for the administrator account at the confirmation screen...

urel.feec.vutbr.cz XSS vulnerability

Open Bug Bounty ID: OBB-555106 Description| Value ---|--- Affected Website:| urel.feec.vutbr.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

CentOS 7 : nautilus (CESA-2018:0223)

An update for nautilus is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

kwkydoor1.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-515935 Description| Value ---|--- Affected Website:| kwkydoor1.godo.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosur...

namikktr6161.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-515824 Description| Value ---|--- Affected Website:| namikktr6161.godo.co.kr Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

giogiaa.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-515529 Description| Value ---|--- Affected Website:| giogiaa.godo.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

woodworker.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-509568 Description| Value ---|--- Affected Website:| woodworker.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

filsonkorea.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-481596 Description| Value ---|--- Affected Website:| filsonkorea.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

QIWI: https://fundl.qiwi.com CSRF на подтверждении sms

Доброго времени суток. Я тут нашел достаточно серьезную CSRF, как мне кажется. Она позволяет привязать номер телефона злоумышленника - угнать деньги. И основана она отчасти на старой CSRF, которую я репортил совсем недавно https://hackerone.com/reports/300676 Так вот, тогда я не доглядел еще одну...

tce.ro.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-456382 Description| Value ---|--- Affected Website:| tce.ro.gov.br Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Threat Outbreak Alert RuleID31629: Email Messages Distributing Malicious Software on December 18, 2017

Medium Alert ID: 56289 First Published: 2017 December 18 18:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31629 may contain the following files: Name |...

nextlevelbikiniprep.com XSS vulnerability

Open Bug Bounty ID: OBB-452958 Description| Value ---|--- Affected Website:| nextlevelbikiniprep.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

MGASA-2017-0444 Updated tor packages fix security vulnerability

When checking for replays in the INTRODUCE1 cell data for a legacy onion service, Tor didn't correctly detect replays in the RSA- encrypted part of the cell. It was previously checking for replays on the entire cell, but those can be circumvented due to the malleability of Tor's legacy hybrid...

immobilier.co.il XSS vulnerability

Open Bug Bounty ID: OBB-448801 Description| Value ---|--- Affected Website:| immobilier.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...